#event #json #leef

leef2hashmap

A Simple LEEF Parser to a HashMap

2 releases

0.1.4 Jun 17, 2022
0.1.3 May 6, 2022

#2203 in Parser implementations

Custom license

23KB
507 lines

LEEF to HashMap

Linux Arm7 Linux x86_64 macOS Windows

Convert a syslog LEEF string or a regular LEEF string to a HashMap object.

Requirements

  • Rust 1.56+ (2021 edition)

Example Usage

[dependencies]
leef2hashmap = "0.1.3"

and then

use leef2hashmap::LeefToHashMap;

fn main() {
    let example = "<134>2022-02-14T03:17:30-08:00 2001:db8:3333:4444:5555:6666:7777:8888 Jan 18 11:07:53 198.76.5.4 LEEF:1.0|VMware Carbon_Black|App Control|8.6.0.155|NEW_PORT_DISCOVERD|<tab>|src=172.5.6.67<tab>dst=172.50.123.1<tab>sev=5<tab>cat=anomaly<tab>msg=there are spaces in this message";
    println!("{:#?}", example.to_hashmap(true));
}
  • pass false to .to_hashmap(false) if you don't want to preserve the original event

License: MIT

No runtime deps